CVE-2024-0136highCWE-653

CVE-2024-0136: falha de alta gravidade em NVIDIA Container Toolkit

Publicada em

Seguir esta CVE+ Monitorar Container Toolkit+ Monitorar NVIDIA GPU Operator

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.6epss 0.7%
NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code obtaining read and write access to host devices. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
Produtos afetados
NVIDIA · NVIDIA Container ToolkitNVIDIA · NVIDIA GPU Operator
CVEs relacionadas — NVIDIA Container Toolkit

No mesmo produto, das mais perigosas para as menos.

CVE-2024-0135HIGHCVE-2024-0135EPSS 1.1%CVE-2024-0134MEDIUMCVE-2024-0134EPSS 0.4%CVE-2024-0137MEDIUMCVE-2024-0137EPSS 0.3%